Skip to main content

The Malware Museum

Mikko Hypponen

The Malware Museum is a collection of malware programs, usually viruses, that were distributed in the 1980s and 1990s on home computers. Once they infected a system, they would sometimes show animation or messages that you had been infected.



rss RSS

86
RESULTS


Show sorted alphabetically

Show sorted alphabetically
SHOW DETAILS
up-solid down-solid
eye
Title
Date Archived
Creator
The Malware Museum
Malware Example: Q CASINO.COM
Malware Example: Q CASINO.COM
software

eye 46,046

favorite 5

comment 5

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 5 reviews )
The Malware Museum
Malware Example: SKYNET.COM
Malware Example: SKYNET.COM
software

eye 57,715

favorite 11

comment 3

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 3 reviews )
The Malware Museum
Malware Example: MARS G.COM
Malware Example: MARS G.COM
software

eye 29,170

favorite 11

comment 6

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 6 reviews )
The Malware Museum
Malware Example: Q WALKER.COM
Malware Example: Q WALKER.COM
software

eye 46,850

favorite 6

comment 3

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 3 reviews )
The Malware Museum
Malware Example: VIRDEM.COM
Malware Example: VIRDEM.COM
software

eye 20,536

favorite 3

comment 2

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 2 reviews )
The Malware Museum
Malware Example: ELVIRA G.COM
Malware Example: ELVIRA G.COM
software

eye 15,138

favorite 1

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: LSD.COM
Malware Example: LSD.COM
software

eye 42,319

favorite 19

comment 6

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 6 reviews )
The Malware Museum
Malware Example: AIDS 552.COM
Malware Example: AIDS 552.COM
software

eye 16,937

favorite 3

comment 2

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 2 reviews )
The Malware Museum
Malware Example: REDCODE.COM
Malware Example: REDCODE.COM
software

eye 10,183

favorite 2

comment 3

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 3 reviews )
The Malware Museum
Malware Example: ZOHRA.COM
Malware Example: ZOHRA.COM
software

eye 11,297

favorite 0

comment 2

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 2 reviews )
The Malware Museum
Malware Example: CRASH.COM
Malware Example: CRASH.COM
software

eye 55,005

favorite 15

comment 3

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 3 reviews )
The Malware Museum
Malware Example: HYMN.COM
Malware Example: HYMN.COM
software

eye 33,735

favorite 6

comment 4

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 4 reviews )
The Malware Museum
Malware Example: MARINE.COM
Malware Example: MARINE.COM
software

eye 21,994

favorite 3

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
( 1 reviews )
The Malware Museum
Malware Example: TECHNO.COM
Malware Example: TECHNO.COM
software

eye 17,988

favorite 5

comment 2

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 2 reviews )
The Malware Museum
Malware Example: HYDRA_II.COM
Malware Example: HYDRA_II.COM
software

eye 9,696

favorite 2

comment 2

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 2 reviews )
The Malware Museum
Malware Example: Q TEQUIL.COM
Malware Example: Q TEQUIL.COM
software

eye 12,557

favorite 1

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: Q FRODO.COM
Malware Example: Q FRODO.COM
software

eye 12,429

favorite 0

comment 2

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 2 reviews )
The Malware Museum
Malware Example: KUKU.COM
Malware Example: KUKU.COM
software

eye 15,347

favorite 4

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: HA.COM
Malware Example: HA.COM
software

eye 10,435

favorite 2

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
The History and the Evolution of Computer Viruses
The History and the Evolution of Computer Viruses
by Mikko Hypponen
movies

eye 19,750

favorite 18

comment 0

Presented at DEF CON 19 in Las Vegas, Nevada in 2011. "It's 2011, so this year it's going to be 25 years since Brain.A, the first PC virus, Join Mikko Hypponen as he talks about the history and evolution of computer viruses. From Brain to Stuxnet, he's spent his career tracking malware and will give a pretty good rundown on what has happened, when and why it mattered. Mikko Hypponen is based in Helsinki, Finland. He has been analysing computer viruses for more than 20 years. He has written...
The Malware Museum
Malware Example: PYRAMID.COM
Malware Example: PYRAMID.COM
software

eye 12,018

favorite 2

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: ITALIAN.COM
Malware Example: ITALIAN.COM
software

eye 7,196

favorite 4

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: META1103.COM
Malware Example: META1103.COM
software

eye 4,122

favorite 0

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
( 1 reviews )
The Malware Museum
Malware Example: PPSCARE.COM
Malware Example: PPSCARE.COM
software

eye 3,287

favorite 1

comment 0

Malware Example: PPSCARE.COM *PPSCARE.COM - upon invocation, PingPongScare (tm) will become resident and clutter the screen with the characteristic "bouncing ball" of the PingPong boot block infector. Computing can continue while PingPongScare is in effect.
The Malware Museum
Malware Example: DELYRIUM.COM
Malware Example: DELYRIUM.COM
software

eye 5,514

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: I13.COM
Malware Example: I13.COM
software

eye 2,798

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: FROLL.COM
Malware Example: FROLL.COM
software

eye 2,945

favorite 0

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: KUKAC.COM
Malware Example: KUKAC.COM
software

eye 4,148

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: NOPSRN G.COM
Malware Example: NOPSRN G.COM
software

eye 4,144

favorite 1

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Project Cyber Virus Presentation at Swissnex
Project Cyber Virus Presentation at Swissnex
by Daniel White
movies

eye 6,462

favorite 3

comment 2

A quick presentation on Virus History by Daniel White at Project Cyber Virus, held on May 5th, 2015 at Swissnex San Francisco. In 2004, Daniel White’s computer was infected with the Sasser worm, a fast-spreading autonomous worm that made millions of computers around the world reboot continuously. Fascinated by the concept of malware, he spent the following years learning everything he could about the subject, from general malware news to specific details of every virus, becoming a self-taught...
favoritefavoritefavoritefavoritefavorite ( 2 reviews )
Topics: Virus, History, Malware
The Malware Museum
Malware Example: COSMOS G.COM
Malware Example: COSMOS G.COM
software

eye 3,038

favorite 2

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: CENTIPED.COM
Malware Example: CENTIPED.COM
software

eye 6,161

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: FLAME.COM
Malware Example: FLAME.COM
software

eye 7,909

favorite 0

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: MARKIZ.COM
Malware Example: MARKIZ.COM
software

eye 5,852

favorite 1

comment 2

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 2 reviews )
The Malware Museum
Malware Example: CREW.COM
Malware Example: CREW.COM
software

eye 5,142

favorite 1

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: CHAD.COM
Malware Example: CHAD.COM
software

eye 6,757

favorite 2

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: HAFEN.COM
Malware Example: HAFEN.COM
software

eye 6,897

favorite 2

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: LITTBROT.COM
Malware Example: LITTBROT.COM
software

eye 3,297

favorite 1

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: MTZ.COM
Malware Example: MTZ.COM
software

eye 3,497

favorite 1

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: CECE.COM
Malware Example: CECE.COM
software

eye 2,566

favorite 2

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: ZHU.COM
Malware Example: ZHU.COM
software

eye 13,234

favorite 1

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: NAMELESS.COM
Malware Example: NAMELESS.COM
software

eye 3,262

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: FLIP.COM
Malware Example: FLIP.COM
software

eye 2,681

favorite 0

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: GIRLS.COM
Malware Example: GIRLS.COM
software

eye 6,175

favorite 3

comment 2

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 2 reviews )
The Malware Museum
Malware Example: HH HH.COM
Malware Example: HH HH.COM
software

eye 7,460

favorite 3

comment 3

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 3 reviews )
The Malware Museum
Malware Example: ARIANNA.COM
Malware Example: ARIANNA.COM
software

eye 9,599

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: HATE.COM
Malware Example: HATE.COM
software

eye 4,501

favorite 0

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: AMBULANC.COM
Malware Example: AMBULANC.COM
software

eye 10,952

favorite 2

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: Q V SIGN.COM
Malware Example: Q V SIGN.COM
software

eye 4,439

favorite 3

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: FELLOW.COM
Malware Example: FELLOW.COM
software

eye 3,029

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: ITL-SIMX.COM
Malware Example: ITL-SIMX.COM
software

eye 2,577

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages. This item comes from a 1990 project of the British Computer Virus Research Centre, and contains additional controls to study the virus in action.
The Malware Museum
Malware Example: MARAWI.COM
Malware Example: MARAWI.COM
software

eye 2,590

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: SPARTAK2.COM
Malware Example: SPARTAK2.COM
software

eye 4,200

favorite 0

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
( 1 reviews )
The Malware Museum
Malware Example: SHAKER.COM
Malware Example: SHAKER.COM
software

eye 2,685

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: SHIFTER.COM
Malware Example: SHIFTER.COM
software

eye 15,809

favorite 1

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: DENSCARE.COM
Malware Example: DENSCARE.COM
software

eye 1,370

favorite 0

comment 0

Malware Example: DENSCARE.COM *DENSCARE.COM - upon invocation, DenZukoScare (tm) immediately displays the popular DEN ZUK virus graphic effect and exits.
The Malware Museum
Malware Example: Z ALEX.COM
Malware Example: Z ALEX.COM
software

eye 2,873

favorite 1

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: JERSCARE.COM
Malware Example: JERSCARE.COM
software

eye 2,136

favorite 0

comment 0

Malware Example: JERSCARE.COM *JERSCARE.COM - upon invocation, JerusalemScare (tm) becomes resident. After a short period of time - about a minute on most systems - Jerusa- lemScare will effect the characteristic Jerusalem virus system slowdown and scrolling black window effect on the left side of the monitor.
The Malware Museum
Malware Example: CHINESE.COM
Malware Example: CHINESE.COM
software

eye 3,521

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: MORSE.COM
Malware Example: MORSE.COM
software

eye 2,782

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: DEN ZUK.COM
Malware Example: DEN ZUK.COM
software

eye 3,926

favorite 1

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: CASC-SIM.COM
Malware Example: CASC-SIM.COM
software

eye 2,750

favorite 1

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages. This item comes from a 1990 project of the British Computer Virus Research Centre, and contains additional controls to study the virus in action.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: FUM-SIMX.COM
Malware Example: FUM-SIMX.COM
software

eye 2,532

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages. This item comes from a 1990 project of the British Computer Virus Research Centre, and contains additional controls to study the virus in action.
The Malware Museum
Malware Example: SCREENMI.COM
Malware Example: SCREENMI.COM
software

eye 2,583

favorite 2

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: STUNNING.COM
Malware Example: STUNNING.COM
software

eye 3,139

favorite 0

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
favoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Malware Example: MALMSEY.COM
Malware Example: MALMSEY.COM
software

eye 2,593

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: QSPRAYER.COM
Malware Example: QSPRAYER.COM
software

eye 2,973

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: OROP-SIM.COM
Malware Example: OROP-SIM.COM
software

eye 2,556

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages. This item comes from a 1990 project of the British Computer Virus Research Centre, and contains additional controls to study the virus in action.
The Malware Museum
Malware Example: IWAG.COM
Malware Example: IWAG.COM
software

eye 2,577

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.
The Malware Museum
Malware Example: JERU-SIM.COM
Malware Example: JERU-SIM.COM
software

eye 3,161

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages. This item comes from a 1990 project of the British Computer Virus Research Centre, and contains additional controls to study the virus in action.
The Malware Museum
Malware Example: YANK-SIM.COM
Malware Example: YANK-SIM.COM
software

eye 4,058

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages. This item comes from a 1990 project of the British Computer Virus Research Centre, and contains additional controls to study the virus in action.
The Malware Museum
Malware Example: YNK-SIMX.COM
Malware Example: YNK-SIMX.COM
software

eye 17,277

favorite 0

comment 1

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages. This item comes from a 1990 project of the British Computer Virus Research Centre, and contains additional controls to study the virus in action.
favoritefavoritefavoritefavoritefavorite ( 1 reviews )
The Malware Museum
Virus Activation Routines
Virus Activation Routines
by Mikko Hyppönen
texts

eye 1,626

favorite 3

comment 0

This paper categorizes different types of virus activation routines which are found in existing viruses and also discusses what triggers these activation routines. Common viruses are used as examples where possible. This paper also covers why it is important to know what a virus exactly does if you are infected by one. Some horror stories of the worst possible activation routine in a virus are also included. The scope of this paper is limited to PC compatible machines.
Topics: virus, viruses, activation, routines, routine, antivirus, user, mosaic, hard, machine, activation...
The Malware Museum
Retroviruses: How Viruses Fight Back
Retroviruses: How Viruses Fight Back
by Mikko Hyppönen
texts

eye 1,066

favorite 2

comment 0

This paper will discuss methods viruses use or might use in the future to attack anti-virus programs. Attacks of this kind are becoming more common, as virus writers seem to be constantly looking for ways to make their viruses more efficient and vigorous. This paper also suggests how to make antivirus products more resistant against such attacks. The scope of this paper is limited to PC compatible machines
Topics: virus, program, viruses, attack, vims, scanner, programs, code, retrovirus, resident, virus...
The Malware Museum
Malware Example: TUCUMAN.COM
Malware Example: TUCUMAN.COM
software

eye 2,559

favorite 0

comment 0

An example of an MS-DOS-based virus, now removed of its destructive capability but leaving its messages.

Fetching more results Fetching more results